336263 matches found
VulnCheck KEV: CVE-2026-116512
The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.1 via the 'id' parameter parameter. This is due to unsanitized 'id' parameter value concatenated...
CVE-2026-119264: Google Chrome: Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…
Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-119265: Google Chrome: Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…
Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
Linux Distros Unpatched Vulnerability : CVE-2026-119271
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...
CVE-2026-119268: Google Chrome: Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…
Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
Linux Distros Unpatched Vulnerability : CVE-2026-119270
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the...
Amazon Linux 2023 : gstreamer1-plugins-good, gstreamer1-plugins-good-gtk (ALAS2023-2026-3353)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3353 advisory. GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreame...
CVE-2026-119266: Google Chrome: Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…
Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
Linux Distros Unpatched Vulnerability : CVE-2026-119268
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...
Linux Distros Unpatched Vulnerability : CVE-2026-76028
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to execute arbitrary code...
Google Chrome numeric error vulnerability
Google Chrome versions prior to 156.0.8078.79 contain a numerical error vulnerability. This vulnerability stems from an integer overflow in Editing, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...
CVE-2026-76028: Google Chrome: Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary…
Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
VulnCheck KEV: CVE-2026-119977
WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-package core upgrades. This makes it possible for unauthenticated attackers to execute code on the server during the upgrade window...
PT-2026-133434
🔴 Dahua Intelligent Connection Center: remote code execution via command injection CVE-2025-31704 A remote attacker can send a specially crafted request to run arbitrary commands on the affected system. Patch → V5.000.0000000.15 https://t.co/0JpnCOlkWo...
Microsoft PowerShell 7.4.x < 7.4.22 / 7.5.x < 7.5.13 / 7.6.x < 7.6.9 RCE (CVE-2026-111497)
The version of Microsoft PowerShell installed on the remote host is 7.4.x prior to 7.4.22, 7.5.x prior to 7.5.13, or 7.6.x prior to 7.6.9. It is, therefore, affected by a remote code execution vulnerability. An out-of-bounds write in the Brotli decoder used by PowerShell 7 allows an unauthorized...
CVE-2026-78403: Thalesgroup Sentinel Keys Server: Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows…
Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the length of the first field in the HTTP request. An attacker may craft an HTTP request and send it to Sentinel Keys Server. ...
PT-2026-133465
Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.42.6 n8n versions 2.43.x prior to 2.43.3 n8n versions 3.x prior to 3.0.1 Description Authenticated users with permissions to create, modify, or import workflows can execute JavaScript within the main process. This occur...
CVE-2021-28480_HoneyPoC3
ExchangeRCE-CVE-2021-28480 THIS IS NOT A REAL EXPLOIT IT IS A HONEYPOC https://blog.zsec.uk/cve-2020-1350-honeypoc/ PoC for exploiting RCE in Exchange CVEs: CVE-2021-28480, CVE-2021-28481, CVE-2021-28482 and CVE-2021-28483. Usage Achieves RCE on Exchange Servers To run, from a Linux host: chmod +...
Detections-CVE-2026-23918
MOVING TO: https://github.com/insomnisec/publiccvedetections FOR BETTER LONG TERM MANAGEMENT OF DETECTION PUBLICATIONS THIS REPO WILL BE REMOVED IN JUNE 2026 PLEASE USE THE OTHER REPO GOING FORWARD CVE-2026-23918 "Apache HTTP/2 Double-Free" — Detection & Response Package Published: 2026-05-04...
CVE-2024-44849
CVE-2024-44849 Author: Extencil [email protected] CVE-2024-44849 is a critical RCE vulnerability that impacts all previous versions up to Qualitor 8.24. Qualitor Website Using this program to attack or compromise any company or system without mutual consent is illegal. The author of this cod...